Abstract:Cloud storage is facing the contradiction between data security and flexible data sharing, and therefore the cryptographic access control mechanisms are well studied. In particular, hierarchical access control in cloud storage is significant for many application scenarios. In these scenarios, the users are divided into several groups organized in a hierarchy, and they are assigned with different access privileges according to their groups and levels. That is, the users in higher level groups can access the data belonging to their subordinate groups while the users in lower level groups cannot access the data belonging to their superior groups. However, most of the existing hierarchical access control solutions seem to be unpractical for their inability of scalable data sharing, inefficiency of key management or lack of delegated reencryption. In this paper, we propose a new hierarchical access control scheme based on key-aggregate encryption, and the proposed scheme realizes scalable data sharing in cloud storage which allows the users to share data with any user group. In the proposed scheme, the size of each key or ciphertext is constant and irrelevant to the scale of hierarchical user structure. Especially, our scheme improves the convenience of key management by cutting off the key derivation widely used in the existing hierarchical key assignment methods. Furthermore, the proposed scheme reduces the users' updating overhead by introducing the delegated re-encryption into the hierarchical scenarios. Finally, the security analysis and the performance evaluation indicate that our scheme is feasible for the hierarchical data sharing applications in cloud storage.

Hierarchy-aware ECC model for cloud

Achieving Simple, Secure and Efficient Hierarchical Access Control in Cloud Computing.

Hierarchical Access Control with Scalable Data Sharing in Cloud Storage

Enforcing Scalable and Dynamic Hierarchical Access Control in Cloud Computing

A Hierarchical Access Control Technology for Cloud Storage

The Trusted Hierarchical Access Structure-Based Encryption Scheme for Cloud Computing

An Efficient Solution for Hierarchical Access Control Problem in Cloud Environment

An Improved Cloud Data Sharing Scheme with Hierarchical Attribute Structure.

A Modified Hierarchical Attribute-Based Encryption Access Control Method for Mobile Cloud Computing

Achieving Fine-Grained Data Sharing for Hierarchical Organizations in Clouds

FEACS: A Flexible and Efficient Access Control Scheme for Cloud Computing

Hierarchical Attribute-Based Access Control with Authentication for Outsourced Data in Cloud Computing

Hybrid AES-Modified ECC Algorithm for Improved Data Security over Cloud Storage

CR-FH-CPABE: Secure File Hierarchy Attribute-Based Encryption Scheme Supporting User Collusion Resistance in Cloud Computing

Hierarchical Attribute-Based Encryption and Scalable User Revocation for Sharing Data in Cloud Servers

A Novel Data Access Scheme In Cloud Computing

An Efficient Privacy-Aware Authentication Scheme with Hierarchical Access Control for Mobile Cloud Computing Services

Hierarchy Attribute-Based Encryption Scheme to Support Direct Revocation in Cloud Storage.

Attribute-Based Hierarchical Access Control with Extendable Policy

EACS: an Efficient Access Control Scheme for Electronic Publishing in Cloud Computing

A Hierarchic Secure Cloud Storage Scheme Based on Fog Computing